“When people adopt a security mindset and are educated on how to protect valuable information on a daily basis, they can become your most valuable security asset,” said Safelight CEO Rob Cheyne. “Security education programs need to address the people and process side of information risk so that organizations aren’t relying solely on technology.”

Safelight’s Security Mindset Challenges will focus on some of the most pressing people security issues that organizations face. These include training the development team in secure coding practices and educating employees on how to avoid common techniques used by hackers to gain access to proprietary data and systems.

In the first Security Mindset Challenge – Breaking The Bank – attackers can leverage web vulnerabilities including SQL injection and cross-site scripting, to log on as an administrator compromising the bank’s security perimeter and gaining unfettered access to systems and applications.

During The Break-In, people can choose from various social engineering techniques, such as piggybacking off an employee badge to walk through a door or pretending to be an electrician who is working in the building, to gain unauthorized access to a facility or restricted areas.

To play the Email Defender challenge, participants will decide among “good” and “bad” emails in their Inbox and receive points for actions they take including opening good ones versus bad ones, and not clicking on links or attachments.

RSA Conference 2012 attendees are invited to participant in all of the challenges at Safelight’s booth, February 27-March 2, 2012, in San Francisco, Calif. Complete any of the challenges and be entered into a drawing for a MacBook Air or Pwnie Express PwnPhone. After completing any challenge, participants will also receive tokens they can give out to other attendees. For each of their chips that is returned to the Safelight booth, they receive an additional chance to win one of the prizes.

To learn specific strategies that can be used to effectively integrate security across the organization, attend Rob Cheyne’s talk at the RSA Conference 2012 on “Cultivating a Culture of Security, Wednesday, February 29 at 12:30 p.m. in the Briefing Center. To learn how to instill a security mindset in every employee, download Safelight’s “Security Mindset” white paper at www.safelightsecurity.com/rsa2012/.

Cheyne will also be presenting “Cube Talk: Learn to Learn by Speed-Solving the Rubik’s Cube,” at the Safelight booth, where he will demonstrate how people learn and how these lessons can be applied to teaching people security. To learn more about Safelight’s on-demand and instructor-led courses for general staff, development teams and IT staff visit the company’s Education Programs page. Organizations can receive their custom blueprint for building an education program that matches the organization’s risk profile by accessing Safelight’s interactive Security Education Blueprint tool.

About Safelight
Safelight is a leader in security education—our integration of deep security expertise and innovative approaches to interactive learning sets us apart. We help organizations build comprehensive education programs that go beyond training to measurably shift the way employees think about the value of information and their role in protecting it. We offer a full range of instructor-led and on-demand courses for development, IT and general staff; each role-specific course is part of a larger program designed to cultivate a culture of security across the organization. Learn more at www.safelightsecurity.com.

Full Story

Full Story

Full Story

Full Story

Safelight is releasing its security education blueprint, an interactive tool that enables organizations to assess the information security needs of their personnel and develop an appropriate security educational program based on that assessment.

Full Story

The application security classes Rob teaches and Safelight’s online learning courses feature training that shows developers what they’re really up against when it comes to these types of attacks.

View Safelight’s cross-site scripting and SQL injections demonstrations on YouTube here.

Full Story